Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to group by count with a stacked chart?

$
0
0
I have the following search... index="server_inventory" NOT "OS Name"=enclosure NOT "OS Name"=na NOT "OS Name"=unknown| eval Mfg=lower(Mfg) | eval "OS Name"=lower('OS Name')| replace windows* with windows | replace microsoft* with windows | replace red* with linux | replace rhel* with linux | replace hp-ux* with linux | replace esx* with esx | replace aix* with linux | replace centos* with linux | replace "oracle linux" with linux | replace sunos* with linux | replace other* with linux| replace unbun* with linux | replace open* with linux | replace vmware* with vmware | replace freebsd* with linux | replace esx* with vmware | replace as* with linux | replace ubuntu* with linux| replace ibm* with linux| replace suse* with linux | replace solaris* with linux|stats count, by "Physical Location _NXP SiteID","OS Name" This gives me the output of "Physical Location", "OS Name", "Count".... AZ34 linux 8 AZ34 windows 13 AZ50 "hp non-stop" 1 AZ50 linux 131 AZ50 vmware 4 AZ50 windows 65 AZ84 "hp non-stop" 1 AZ84 linux 290 AZ84 vmware 16 AZ84 windows 257 ... I would like to produce a stacked chart with the "Physical Location" grouped as the X axis with the "OS Name" stacked for each "OS Name" for Y axis. Does this make sense? Thanks for your help in advance.

Viewing all articles
Browse latest Browse all 47296

Trending Articles